Ravi Sandhu
- Author of the RBAC96 family of role-based access control models
- Founding executive director of the UTSA Institute for Cyber Security
- Holder of the Lutcher Brown Endowed Chair in Cyber Security
Bio
Ravi Sandhu formalized the RBAC96 family of models, which set out roles, role hierarchies, constraints, and their administrative counterparts as a coherent framework rather than a product feature. He was founding executive director of the Institute for Cyber Security at UTSA and holds the Lutcher Brown Endowed Chair.
Profile built from public academic and publication records.
Where their work shows up
Every access-control screen that lets you assign a role rather than a list of permissions inherits this model, including the hierarchy and separation-of-duties constraints that make it useful for audit. RBAC96 also established the vocabulary the field still argues in, which is why the move to attribute- and relationship-based models is framed as a successor to it rather than a replacement. See RBAC vs ABAC vs ReBAC, implementing RBAC in the enterprise, and what is IGA.
Related on Start with Identity
- ExpertCo-author of the Needham-Schroeder protocol
Michael D. Schroeder co-authored two of the foundational papers in this field within three years of each other: the 1975 design-principles paper with Jerome Sal
- ExpertCo-author of the NIST RBAC model
David Ferraiolo co-authored "Role-Based Access Controls" with Rick Kuhn, presented at the 15th National Computer Security Conference in October 1992. The NIST m
- ExpertCo-author of the NIST RBAC model
Rick Kuhn co-authored the 1992 NIST paper on role-based access control with David Ferraiolo and has worked on the model, its formalization, and its assurance ev